Job Overview:
We are seeking a skilled and passionate security engineer to lead the central software security testing program across software in Arm. The role is within Arm's multifaceted Product Security team. You will have the opportunity to drive improvements in security of Arm software, and processes, and build security culture.
Responsibilities:
- Develop comprehensive software security assessment methodology.
- Conduct security assessments and code reviews to identify and remediate vulnerabilities in firmware and system software.
- Review and advise on output of security testing, including DAST, SAST, SCA
- Advance baseline for security testing across Arm's software.
- Develop software fuzz testing strategy at Arm.
- Enable engineering teams to implement security testing independently.
- Keep up-to-date with industry best practices and developments in software security.
Required Skills and Experience :
- Deep knowledge and expertise in developing and reviewing software threat models.
- Experience writing secure code, and designing secure software specifically for low level software such as drivers, firmware.
- Knowledge of well known industry standard fuzzing tools such as AFL, libfuzzer, syzcaller.
- Demonstrated skills for secure code reviews (C/C++) of complex software projects.
- Experience in automation using scripting languages (e.g., Python).
- Experience in performing Software Composition Analysis using tools such as Black Duck
"Nice To Have" Skills and Experience :
- Expericence working with Arm's open source software.
- Knowledge of Arm assembly.
- Expericence in penetration testing.
- Delivered software security training.
- Experience in configuration and creation of rules for SAST tools such as Coverity and SonarQube.
- Experience in performing root cause analysis for security issues.
- Experience working with relevant security certification schemes (e.g., PSA Certified, common criteria, SESIP) and international standards (e.g, ISO 21434, IEC 62443).
In Return:
Arm is committed to global talent acquisition, offering an attractive relocation package. With offices worldwide, Arm is a diverse organization of dedicated, creative, and hardworking engineers. By enabling a dynamic, inclusive, meritocratic, and open workplace where everyone can grow and succeed, we encourage our people to share their outstanding contributions to Arm's success in the global marketplace.
#LI-PD1
Accommodations at Arm
At Arm, we want our people to Do Great Things. If you need support or an accommodation to Be Your Brilliant Self during the recruitment process, please email . To note, by sending us the requested information, you consent to its use by Arm to arrange for appropriate accommodations. All accommodation requests will be treated with confidentiality, and information concerning these requests will only be disclosed as necessary to provide the accommodation. Although this is not an exhaustive list, examples of support include breaks between interviews, having documents read aloud or office accessibility. Please email us about anything we can do to accommodate you during the recruitment process.
Hybrid Working at Arm
Arm's approach to hybrid working is designed to create a working environment that supports both high performance and personal wellbeing. We believe in bringing people together face to face to enable us to work at pace, whilst recognizing the value of flexibility. Within that framework, we empower groups/teams to determine their own hybrid working patterns, depending on the work and the team's needs. Details of what this means for each role will be shared upon application. In some cases, the flexibility we can offer is limited by local legal, regulatory, tax, or other considerations, and where this is the case, we will collaborate with you to find the best solution. Please talk to us to find out more about what this could look like for you.
Equal Opportunities at Arm
Arm is an equal opportunity employer, committed to providing an environment of mutual respect where equal opportunities are available to all applicants and colleagues. We are a diverse organization of dedicated and innovative individuals, and don't discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.